Vulnerabilities in Unknown

5,591 results
Vexday analysis

O fornecedor apresenta um portfólio de 4.268 vulnerabilidades, com 144 publicadas nos últimos 90 dias, indicando exposição contínua a riscos. Embora nenhuma esteja sob ataque ativo documentado no KEV, as 124 vulnerabilidades críticas e a predominância de falhas de validação de entrada (CWE-79) representam vetores de exploração significativos que demandam atenção imediata em priorização de patches.

CVE-2026-4259HIGHUltimate WooCommerce Auction Pro <= 2.4.5 - Reflected XSS via uwa_manage_auctionsEPSS 0.3%CVE-2026-19056HIGHProSolution WP Client < 2.0.11 - Reflected XSS via 'page' ParameterEPSS 0.3%CVE-2026-19055HIGHProSolution WP Client < 2.0.11 - Reflected XSS via Multiple ParametersEPSS 0.3%CVE-2025-1454MEDIUMNinja Pages <= 1.4.2 - Admin+ Stored XSSEPSS 0.3%CVE-2022-4102LOWRoyal Elementor Addons < 1.3.56 - Subscriber+ Arbitrary Post DeletionEPSS 0.3%CVE-2026-6495HIGHAjax Load More < 7.8.4 - Reflected XSSEPSS 0.3%CVE-2026-14567MEDIUMWP User Frontend < 4.3.10 - Unauthenticated User Email and Phone Disclosure via User DirectoryEPSS 0.3%CVE-2026-76790HIGHEstatik < 4.3.5 - Reflected XSS via get_listings hash ParameterEPSS 0.3%CVE-2026-84168MEDIUMEasy Hide Login < 1.7 - Login Page Protection Bypass / Hidden URL DisclosureEPSS 0.3%CVE-2026-19782MEDIUMWPS Bidouille < 1.33.5 - Subscriber+ User Email Disclosure via wps_get_usersEPSS 0.3%CVE-2022-4368MEDIUMWP CSV <= 1.8.0.0 - Reflected XSS via CSV ImportEPSS 0.3%CVE-2026-77115HIGHBrave Popup Builder < 0.8.6 - Unauthenticated Reflected XSS via UTM ParametersEPSS 0.3%CVE-2026-12970HIGHLearnPress < 4.4.1 - Reflected XSS via c_searchEPSS 0.3%CVE-2026-16984MEDIUMWP Legal Pages < 3.7.1 - Unauthenticated API Secret DisclosureEPSS 0.3%CVE-2026-75823HIGHWP User Frontend 3.5.29 - 4.3.11 - Unauthenticated Privilege Escalation via Registration Role EncryptionEPSS 0.3%CVE-2026-16576HIGHDokan < 5.0.14 - Shop Manager+ Arbitrary Plugin Installation/Activation via REST APIEPSS 0.3%CVE-2024-4531HIGHBusiness Card <= 1.0.0 - Card Edit via CSRFEPSS 0.3%CVE-2025-2560MEDIUMNinja Forms < 3.10.1 - Admin+ Stored XSSEPSS 0.2%CVE-2026-11366LOWMonsterInsights < 11.1.0 - Unauthenticated Measurement Protocol Secret Update via Empty-Key HMAC BypassEPSS 0.2%CVE-2026-77006CRITICALWebTotem Backups < 1.1.0 - Subscriber+ Arbitrary File Deletion via Path TraversalEPSS 0.2%